discount-hygiene-cleanup
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill performs routine administrative tasks for Shopify store management using authorized toolkits (
shopify-admin). It does not attempt to bypass security controls or exfiltrate data to unauthorized third parties. - [COMMAND_EXECUTION]: The skill is designed to perform data-modifying operations via the
discountCodeDeleteGraphQL mutation. This capability is explicitly documented as its primary purpose, and safety measures are implemented, including a mandatorydry_runparameter that defaults to true, requiring explicit user intent to commit changes. - [DATA_EXFILTRATION]: Analysis of the GraphQL operations and workflow steps confirms that data access is restricted to the Shopify store environment. Information retrieved (discount titles, expiry dates, usage counts) is used solely for the cleanup logic and is not transmitted to external or suspicious domains.
Audit Metadata